This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft File: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft (raw, json) Hash identifier: PNcY+Y1MgUKve5OCdNs+hy+awcQNIFugchipmVIb+Gg= Subject key identifier: 04:C3:B1:54:BB:28:48:DC:F7:C5:65:D2:03:0E:69:6E:C8:77:86:B3 Authority key identifier: 5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42 Certificate issuer: /CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42 Certificate serial: 019AF46583367570F71B38B9378178174242 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft Manifest number: 0F92 Signing time: Sat 06 Dec 2025 16:01:24 +0000 Manifest this update: Sat 06 Dec 2025 16:01:24 +0000 Manifest next update: Sun 07 Dec 2025 16:01:24 +0000 Files and hashes: 1: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl (hash: tjL25Iyqk9NPgRiVqJlGAqxLoj8Inp5qTWtiIok8fUY=) 2: sKACgvTr5E2KmqilEPnCMtDVWp0.roa (hash: GFqzFhApZWxNeYshDRfyRg5L0vTOIJdMwgZ8ZtOAg9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:83:36:75:70:f7:1b:38:b9:37:81:78:17:42:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42 Validity Not Before: Dec 6 16:01:24 2025 GMT Not After : Dec 7 16:01:24 2025 GMT Subject: CN=04c3b154bb2848dcf7c565d2030e696ec87786b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:11:5b:7d:e5:ba:86:c8:33:6a:93:eb:d3:d5: 80:57:e3:b4:ef:72:a0:b0:65:cd:b1:15:4b:3e:b2: 91:cc:83:05:8e:60:ff:36:9a:72:12:0e:db:dc:76: cf:37:94:0f:9e:02:1b:a0:96:32:8e:1d:3c:57:c5: 70:c2:e4:34:23:bb:ec:13:a8:96:20:e8:ec:75:ee: 13:cf:66:82:b2:91:14:f5:06:83:f6:37:27:df:c3: 11:e4:4f:88:62:e1:8a:3b:c3:c8:ec:ee:bf:38:ae: ee:ed:18:49:93:2c:4e:65:48:3c:c2:2e:22:46:36: 38:64:c0:63:c3:2d:8d:b4:70:b9:97:e0:75:7c:60: 4c:90:79:6d:82:9e:12:0e:dd:44:e1:5f:01:44:77: a2:39:24:26:98:73:7e:2b:de:3a:0d:7f:20:25:17: 26:de:6d:36:8b:1f:f5:9f:ec:e8:ac:63:88:0d:3b: 65:08:24:52:91:5b:13:21:1b:a7:32:20:6c:a6:dd: 33:7a:f5:8d:56:68:19:11:6f:fb:02:d0:c2:3b:a4: 7c:80:b8:b1:5e:55:b6:59:96:32:a8:83:b5:3a:cc: c1:b0:c0:4b:14:6d:99:df:3f:83:54:af:ac:ad:60: 97:5c:65:73:73:6a:44:b5:26:c0:69:60:63:c8:98: 25:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C3:B1:54:BB:28:48:DC:F7:C5:65:D2:03:0E:69:6E:C8:77:86:B3 X509v3 Authority Key Identifier: keyid:5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6c:4a:98:4c:f5:2d:5d:e9:f3:e3:46:35:5e:eb:78:32:b7: 23:7b:9b:a1:cb:39:28:3c:e1:7b:c8:7c:65:f8:56:fb:d0:86: e5:31:0b:71:d2:cd:10:35:b0:f1:0f:1b:39:28:8c:c3:4a:1f: 7b:7e:51:62:c4:b0:21:6d:a4:16:3d:95:9f:50:27:d2:a1:c0: 23:03:8b:ff:d5:b1:7d:3b:c2:fd:e4:cc:f9:01:aa:35:6f:bf: 21:aa:fe:de:34:45:49:2e:e4:43:6f:80:6a:6c:48:6f:cc:cb: 8d:75:f6:91:54:b8:aa:c4:1f:10:2a:ed:3f:58:4a:3b:ba:bb: c7:6e:88:a1:97:ce:b6:b5:9a:f7:a2:4c:f2:8e:51:48:84:05: af:67:e2:3a:a3:26:bd:6d:a6:ce:b1:5c:ac:e0:15:ba:65:bc: 34:b6:58:63:09:42:21:c9:28:3f:ad:36:3f:e8:60:00:1d:c8: e1:62:b1:c3:27:24:88:ce:24:d8:ab:ab:6a:48:de:16:dd:16: f8:4f:bd:a2:9f:e5:c5:2a:07:78:86:ec:7c:a0:70:82:29:37: 21:9e:b3:9e:cc:bd:a6:10:ef:63:9c:90:9f:08:75:75:fe:68: d3:33:32:ba:28:af:35:ab:ce:c5:b3:25:da:d7:49:43:3c:9d: 41:4e:f4:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZYM2dXD3Gzi5N4F4F0JCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYTRlNTcxMGE0NjUzNmJlZjJhZjM2YmY2M2YxOTQwYmMz N2JkNDIwHhcNMjUxMjA2MTYwMTI0WhcNMjUxMjA3MTYwMTI0WjAzMTEwLwYDVQQD EygwNGMzYjE1NGJiMjg0OGRjZjdjNTY1ZDIwMzBlNjk2ZWM4Nzc4NmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxFbfeW6hsgzapPr09WAV+O073Kg sGXNsRVLPrKRzIMFjmD/NppyEg7b3HbPN5QPngIboJYyjh08V8VwwuQ0I7vsE6iW IOjsde4Tz2aCspEU9QaD9jcn38MR5E+IYuGKO8PI7O6/OK7u7RhJkyxOZUg8wi4i RjY4ZMBjwy2NtHC5l+B1fGBMkHltgp4SDt1E4V8BRHeiOSQmmHN+K946DX8gJRcm 3m02ix/1n+zorGOIDTtlCCRSkVsTIRunMiBspt0zevWNVmgZEW/7AtDCO6R8gLix XlW2WZYyqIO1OszBsMBLFG2Z3z+DVK+srWCXXGVzc2pEtSbAaWBjyJgl3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATDsVS7KEjc98Vl0gMOaW7Id4azMB8GA1UdIwQY MBaAFFqk5XEKRlNr7yrza/Y/GUC8N71CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3FUbGNRcEdVMnZ2S3ZOcjlqOFpRTHczdlVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xZGQ4MWMtNjY1ZS00Yjc2LTkxZmIt NDRkYzUyYTE5Y2U1LzEvV3FUbGNRcEdVMnZ2S3ZOcjlqOFpRTHczdlVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xZGQ4MWMtNjY1ZS00Yjc2LTkxZmItNDRkYzUyYTE5Y2U1 LzEvV3FUbGNRcEdVMnZ2S3ZOcjlqOFpRTHczdlVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWxKmEz1 LV3p8+NGNV7reDK3I3ubocs5KDzhe8h8ZfhW+9CG5TELcdLNEDWw8Q8bOSiMw0of e35RYsSwIW2kFj2Vn1An0qHAIwOL/9WxfTvC/eTM+QGqNW+/Iar+3jRFSS7kQ2+A amxIb8zLjXX2kVS4qsQfECrtP1hKO7q7x26IoZfOtrWa96JM8o5RSIQFr2fiOqMm vW2mzrFcrOAVumW8NLZYYwlCIckoP602P+hgAB3I4WKxwyckiM4k2KurakjeFt0W +E+9op/lxSoHeIbsfKBwgik3IZ6znsy9phDvY5yQnwh1df5o0zMyuiivNavOxbMl 2tdJQzydQU70AA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:33:13 2025 by rpki-client